A substrate, not a service.
Citrate is the layer underneath your AI workloads ... auditable by construction, deployable on your hardware, verifiable by independent inspection.
The substrate in three parts.
Settlement, execution, audit ... independent surfaces, composable, replaceable. Applications inherit the audit chain from the layer beneath.
A verifiable ledger built for institutional workloads.
GhostDAG consensus with parallel-block topology. EVM-equivalent execution surface so anything Solidity-compatible runs. Live testnet at rpc.citrate.ai, chain ID 40204. Operates as a private deployment per-installation ... no public-network dependency.
AI as a first-class workload.
A REVM-backed execution surface with deterministic precompiles for inference ... Q16.16 fixed-point math that produces bit-identical results across heterogeneous CPUs. A federated learning daemon with cryptographic dispute paths. Parallel execution with verified 2× speedup on standard transfer workloads.
Compliance by construction.
Twenty-five deployed smart contracts on chain 40204 that handle multi-tenant role-based access, classification gating, multi-signature envelopes, contradiction tracking, and 3PAO-ready audit-bundle export. Composable: applications inherit the audit chain from the substrate they sit on.
121+ formal specifications. Most-verified L1 substrate in production.
Most production blockchain protocols apply formal verification to a small number of critical consensus paths ... typically fewer than twenty TLA+ specifications, often zero. AWS, the canonical industrial reference for TLA+ since 2011, applies it surgically. Microsoft Azure's Confidential Consortium Framework uses it on distributed-protocol paths.
Citrate applied the same methodology workspace-wide. Our specifications cover consensus, execution, storage, signing, networking, governance, the agent runtime, RBAC primitives, classification gating, and multi-tenant envelope handling. Specific runs include Fifty billion-plus states explored on the transaction signing flow alone.
This is the engineering moat. It compounds with every release.
A NIST-aligned cryptographic suite, by design.
The substrate inherits its primitives from RFCs and NIST guidance. No invented primitives. No homegrown curves. No reliance on a single vendor.
Identity, signing, transport
- Ed25519 · RFC 8032 native signing
- secp256k1 ECDSA · EVM compatibility
- Noise_XX_25519_ChaChaPoly_SHA256 · mutually-authenticated transport
- ECVRF-P256-SHA256-TAI · proposer election (RFC 9381)
Storage, derivation, post-quantum
- Argon2id · PHC-winner password hash
- AES-256-GCM · encrypted storage with secure cleanup
- HKDF-SHA-256 · tenant sub-secret derivation chain
- CRYSTALS-Kyber + X25519 · hybrid quantum-safe storage
- aws-lc-rs · FIPS path documented; CMVP queue in progress
We meet you where you operate.
Customer hardware. Customer keys. Everything stays on your floor.
All inference, training, and audit stays behind your perimeter. The substrate runs as a self-contained installation. This is V1 and the operational mode we recommend for mission-critical work.
Each participant runs its own node. Aggregate without sharing data.
Federated learning aggregates updates across organizations without ever exposing raw data. Cryptographic dispute paths verify suspected-bad updates. Use cases: industry consortia, multi-program defense, multi-institution clinical research.
Managed cloud delivery. Available after our own FedRAMP ATO.
For organizations that want a managed cloud-delivered substrate. Will operate under our own FedRAMP Moderate ATO (sponsor-dependent timeline). An optional surface, not the primary product.
Every claim on this page is independently verifiable.
- Live testnethttps://rpc.citrate.ai · Chain ID 40204
- Federated daemonhttps://federated.citrate.ai · read-through dashboard
- TLA+ spec indexProvided in the verification packet
- Deployed contractsAddresses published per release
- Release artifactscosign-verifiable · CycloneDX + SPDX SBOMs · SLSA provenance
Take a closer look.
Thirty minutes is enough for a technical walk-through. We answer the questions that matter and tell you plainly what we have not yet built.